Privacy Policy
This privacy policy describes how HiyaHiya Asia collects, uses, stores and protects personal information when you visit our website, apply for a wholesale account, place an order or contact us. We are committed to protecting your privacy and handling your personal data responsibly and in accordance with applicable data protection laws.
Information We Collect
When you interact with our website or services, we may collect various types of personal information, including:
Your name, business name, billing address, shipping address, email address, telephone number and account credentials when you register for a wholesale account or place an order. We also collect order and transaction information, including products purchased, payment details, order history and correspondence with our customer service team.
Technical information may be collected automatically when you visit our website, such as your IP address, browser type and version, device information, operating system, referring website, pages viewed, time spent on pages and other website activity data. This information helps us understand how visitors use our website and improve our services.
How We Use Your Information
We use the personal information we collect for the following purposes:
To create and administer wholesale customer accounts, process and fulfil orders, arrange payments and coordinate shipping and delivery. We use your information to provide customer service, respond to enquiries, communicate about orders, resolve disputes and provide technical support.
Your information helps us prevent fraud, detect and prevent misuse of our website and services, maintain and improve website functionality and user experience, analyse website performance and customer preferences, and comply with legal and regulatory obligations.
Where permitted by applicable law and in accordance with your preferences, we may use your contact information to send relevant business communications, product updates, promotional offers and marketing materials. You may opt out of marketing communications at any time.
Legal Bases for Processing
We process your personal information on the following legal bases:
Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, such as processing your wholesale account application or fulfilling your order.
Where processing is necessary to comply with our legal obligations, such as tax, accounting and regulatory requirements.
Where processing is necessary for our legitimate business interests or those of a third party, provided those interests do not override your fundamental rights and freedoms. Legitimate interests include operating and improving our business, preventing fraud, maintaining website security and providing customer service.
Where you have given your consent to the processing of your personal information for one or more specific purposes. You may withdraw your consent at any time where processing is based on consent.
Shopify & Service Providers
The HiyaHiya Asia online store is hosted on the Shopify ecommerce platform. Shopify processes certain visitor and customer information on our behalf to provide the ecommerce platform, hosting, payment processing, order management and related services. Shopify's use of your personal information is governed by Shopify's Privacy Policy.
We may share your personal information where necessary with other trusted service providers who assist us in operating our business, including payment providers, shipping and logistics providers, IT and cloud service providers, professional advisers such as accountants and lawyers, and other companies required to deliver our products and services to you. These service providers are contractually obligated to use your personal information only as necessary to provide their services to us and to protect the confidentiality and security of your information.
Payments
Payment information, including payment card details, is processed by the applicable payment provider in accordance with payment card industry security standards. HiyaHiya Asia does not directly store complete payment card details on our systems. Payment information is handled securely by our payment providers to process transactions and prevent fraud.
Cookies & Website Technologies
Our website uses cookies and similar technologies to enable essential website functions, maintain security, remember your preferences, analyse website performance and visitor behaviour, and, where applicable and permitted by law, deliver relevant marketing and advertising.
Cookies are small text files stored on your device when you visit our website. You can manage your cookie preferences and privacy choices through the consent controls available on our website. You may also configure your browser settings to refuse or delete cookies, although this may affect your ability to use certain features of our website.
Sharing Personal Information
We share your personal information only where reasonably necessary to operate our online store, fulfil orders, provide services, comply with legal obligations, protect our legal rights and the rights of others, or where you have otherwise authorised the sharing.
We may disclose personal information to law enforcement, regulatory authorities or other third parties where required or permitted by law, including to respond to legal process, enforce our terms and conditions, protect against fraud or security threats, or protect the rights, property and safety of HiyaHiya Asia, our customers and the public.
We do not sell your personal information for monetary payment. Any sharing of personal information is conducted in accordance with applicable data protection laws and our contractual obligations.
International Data Transfers
Some of our service providers, including Shopify and its service providers, may process your personal information in countries outside your country of residence. These countries may have data protection laws that differ from those in your country.
Where required by applicable law, we ensure that appropriate safeguards are in place for international transfers of personal data, such as standard contractual clauses approved by the European Commission or other legally recognised transfer mechanisms. We take steps to ensure that your personal information continues to receive an adequate level of protection when transferred internationally.
Data Retention
We retain your personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, tax, fraud prevention, dispute resolution and regulatory requirements.
The retention period for personal information depends on the nature of the information, the purposes for which it is processed and applicable legal requirements. For example, we retain order and transaction information for accounting and tax purposes, customer service records to resolve disputes and provide support, and account information for as long as your account remains active or as needed to provide services to you.
When personal information is no longer required, we securely delete or anonymise it in accordance with our data retention policies and applicable law.
Your Privacy Rights
Depending on your location and applicable data protection laws, you may have certain rights regarding your personal information, including:
The right to access your personal data and receive information about how we process it. The right to request correction of inaccurate or incomplete personal information. The right to request deletion of your personal information in certain circumstances. The right to restrict or object to certain types of processing of your personal information. The right to receive certain personal data in a portable format and transmit it to another controller. The right to withdraw consent where processing is based on your consent, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, please contact us using the contact information provided on our website. We will respond to your request in accordance with applicable data protection laws. Please note that certain rights may be subject to limitations or exceptions under applicable law.
If you are not satisfied with our response to your privacy request or believe we are processing your personal information in violation of applicable law, you have the right to lodge a complaint with the competent data protection supervisory authority in your jurisdiction.
Data Security
HiyaHiya Asia uses reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. We implement appropriate security controls to safeguard the confidentiality, integrity and availability of your personal data.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure. While we strive to protect your personal information, we cannot guarantee absolute security of data transmitted to or stored on our systems.
Changes to This Privacy Policy
This Privacy Policy may be updated periodically to reflect changes to our website, business practices, technology or legal requirements. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your personal information. The date of the most recent update is shown below.
Last updated: 11 August 2026
Contact Us
If you have questions about this Privacy Policy, how we handle personal information or wish to exercise a privacy right, please contact us.
HiyaHiya Asia
Email: info@hiyahiya-asia.com